# Production runtime environment for the Coves frontend container.
# Copy to .env.prod on the server (gitignored). Loaded by docker-compose.prod.yml
# via env_file. Full reference for every variable: docs/ENVIRONMENT.md.

# Public URL of this frontend. adapter-node needs it for origin / form-action
# checks; its https scheme also gates the CSP upgrade-insecure-requests directive.
ORIGIN=https://coves.social

# Header the front proxy (the backend stack's Caddy) sets to the real client IP.
# Caddy's `header_up X-Real-IP {remote_host}` OVERWRITES any client-sent value —
# that is the property this setting depends on. Do not change one without the other.
ADDRESS_HEADER=x-real-ip

# The Coves backend as the BROWSER reaches it. Required in production.
PUBLIC_INSTANCE_URL=https://coves.social

# The backend as THIS CONTAINER reaches it: straight to the appview container
# over coves-prod-network, skipping the Caddy round-trip. Plaintext http is
# allowed only for this exact origin, hence ALLOW_HTTP_INTERNAL_INSTANCE.
PUBLIC_INTERNAL_INSTANCE=http://appview:8080
ALLOW_HTTP_INTERNAL_INSTANCE=true

# Origins <video> may stream from (CSP media-src): our PDS (both hostnames) and
# the tidepool bridge PDS that hosts blobs for bridged Lemmy communities. Must
# match the media-src list in the backend Caddyfile's fallback CSP.
CSP_VIDEO_ORIGINS=https://pds.coves.me https://coves.me https://tdpl.io

# Login is pinned to PUBLIC_INSTANCE_URL. Must stay true: connect-src in the
# app's CSP only allows this instance (docs/ENVIRONMENT.md, Security headers).
#PUBLIC_LOCK_TO_INSTANCE=true

# Leave UNSET in production: SSR currently activates a cross-request locale race
# and a guest-rendered flash for logged-in users (docs/ENVIRONMENT.md, Rendering).
#PUBLIC_SSR_ENABLED=false

# Stack traces in the structured server log (scrubbed). Set 0 to omit.
#LOG_STACKS=0